4 ms·

Then you can have your client lookup blacklistedsite.com.yourdomain.com and have yourdomain.com return the record of blacklistedsite.com to bypass filtering.

• Nextgrid 6y ago
  Just like you could register your own domain and return the record of a blacklisted website?
  • Kliment 6y ago
    Of course, but presumably the censoring dns server would never return a censored ip, regardless of domain. Whereas if you were to passthrough all non-blacklisted queries you wouldn't be able to block that, which is why no censor would ever implement it that way.
    • Firehawke 6y ago
      Which is why you'd end up implementing tunneling for your DNS requests like cloudflared provides.